Palo Alto Networks Strata Associate PSE-STRATA-ASSOCIATE Questions & Answers

• Question 1:

  Implementation of which PAN-OS feature improves visibility and prevention of malware?

  A. Anti-Spyware profiles

  B. Data Filtering profiles

  C. Decryption profiles

  D. Antivirus profiles

  Correct Answer: A

• Question 2:

  Which Palo Alto Networks product offers a centrally managed firewall update process?

  A. SD_WAN

  B. Prisma SaaS

  C. Panorama

  D. WildFire

  Correct Answer: C

• Question 3:

  Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor trafficduring evaluations without interruption to network traffic?

  A. Layer 2

  B. TAP mode

  C. virtual wire

  D. Layer 3

  Correct Answer: B

• Question 4:

  Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

  A. virtual wire

  B. TAP mode

  C. Layer 3

  D. Layer 2

  Correct Answer: A

• Question 5:

  A firewall enabled as a decryption broker will take which of the following actions?

  A. forward clear text traffic to security chains for additional enforcement

  B. monitor the state of active connections to determine which network packets to allow through

  C. correlate a series of related threat events that indicate a likely compromised host on the network

  D. identify potential denial-of-service (DoS) attacks and take protective action

  Correct Answer: C

• Question 6:

  What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

  A. tech support file

  B. Panorama plugin registration file

  C. stats dump file

  D. system process core file

  Correct Answer: C

• Question 7:

  The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known aswhat?

  A. LLDP profiles

  B. security zones

  C. DHCP groups

  D. security profile groups

  Correct Answer: B

• Question 8:

  Which of the following is an advantage of the Palo Alto Networks Next-Generation Firewall (NGFW)?

  A. Docker containerscan be run on the hardware to add features.

  B. It identifies applications by port number and protocol.

  C. It is well positioned in the network to do more than provide access control.

  D. Customers can create their own mix of security vendor products.

  Correct Answer: C

• Question 9:

  Which three of the following arefeatures of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.)

  Select 3 Correct Responses

  A. Login-ID

  B. User-ID

  C. App-ID

  D. Network-ID

  E. SSL/SSH Decrypt

  Correct Answer: BCE

• Question 10:

  What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

  A. micro-segmenting network traffic based on the unique identification number of the content

  B. increasing latency as new threat prevention features are enabled

  C. detecting and preventing known and unknown threats in a single pass

  D. enforcing policy control over unapproved web surfing

  E. proactively identifying and defending against unknown, new, or custom malware and exploits

  Correct Answer: CDE